$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/bc3f5013-698c-36d5-83ea-4f564daf88b5.roa File: bc3f5013-698c-36d5-83ea-4f564daf88b5.roa (raw, json) Hash identifier: bvMRPVv+i+/Q7Ofo7u2vetHKrenQUJMxP36RB3a/AHQ= Subject key identifier: A9:C7:C2:E0:5D:1D:4B:E8:80:88:34:BB:D6:FA:2B:A8:A5:54:5A:6F Certificate issuer: /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb Certificate serial: 010D0C9F4328584B970CD51A7B3B7348EFE0A100 Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/bc3f5013-698c-36d5-83ea-4f564daf88b5.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 15128 IP address blocks: 2604:fb80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d5:1a:7b:3b:73:48:ef:e0:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=cfba859d-4009-426b-b28a-2cc1be874f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:55:ff:88:87:f0:ab:7c:b6:99:91:e8:61:21: 42:fe:15:1e:ad:56:da:f1:49:22:33:42:15:bc:12: a3:ce:7e:97:6a:0c:4f:60:b7:e4:fd:f6:8a:e5:3c: c9:09:7a:b1:7e:ee:62:fd:ba:36:94:f8:df:75:70: ba:47:3c:74:87:46:61:31:19:a4:03:3d:15:5d:7c: 97:8f:87:c6:08:ed:11:31:69:b0:87:9c:cb:50:cb: 1e:c8:94:b7:3a:27:fd:28:d8:98:63:05:01:4c:67: 72:d1:18:07:ce:fc:2f:8c:fc:90:e0:cd:b1:a8:98: b1:b1:25:db:80:0e:69:3a:14:a3:32:1d:55:0a:9c: 34:9f:d7:f3:9e:b8:9d:7c:d5:88:ee:0b:0d:c0:48: e6:f6:40:d6:a9:2a:6b:5e:16:b8:02:f0:50:ee:77: b1:6e:38:44:8d:cd:44:00:cf:1f:8a:82:aa:b1:d7: 97:30:28:47:fb:64:2f:30:c4:fb:1e:ec:e7:a3:fc: 57:4f:e1:12:73:70:ce:4b:20:65:b1:84:50:37:7d: 15:c2:63:02:ae:30:1d:5a:e9:f3:61:08:86:be:97: 7d:7b:2e:c0:90:5b:d3:2e:8a:21:61:ef:9a:85:7a: cd:c2:d0:29:a1:4e:67:b6:af:57:07:6d:7d:d5:21: 87:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C7:C2:E0:5D:1D:4B:E8:80:88:34:BB:D6:FA:2B:A8:A5:54:5A:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/bc3f5013-698c-36d5-83ea-4f564daf88b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl X509v3 Authority Key Identifier: keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer sbgp-ipAddrBlock: critical IPv6: 2604:fb80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:28:3d:8a:e7:5b:43:10:d4:41:5a:bf:98:79:0d:1e:b7:c8: 55:1d:b4:8a:91:e0:50:ba:98:28:90:76:2a:73:b8:77:ba:f3: 0a:0a:e4:d1:0d:1a:0f:fa:b8:51:34:8d:7d:a2:4b:4a:c5:07: bc:96:c5:1f:eb:e9:d4:06:76:3f:44:4d:0e:e1:e7:57:33:12: 9c:c5:58:01:06:55:a1:3c:cd:ba:22:2d:7d:34:dd:47:ec:a3: 1d:ec:1d:89:e8:ba:3b:dd:f5:57:24:c3:ae:47:d7:3a:da:6c: b1:2d:5e:22:2b:48:ce:88:ff:04:25:06:bb:da:a2:aa:f4:82: 3a:2c:1e:bb:77:1e:d7:78:71:e0:d4:05:8f:59:b0:80:14:5c: 76:e1:52:db:97:1d:ec:88:5d:95:9c:c7:c9:ef:15:44:be:77: 96:ea:39:8d:24:c6:1d:58:a3:95:69:64:09:a1:77:89:ea:62: 1e:59:af:94:5e:d2:9f:1f:9d:19:55:4e:b6:6b:b1:ef:57:f5: 60:fb:0d:c3:c1:d2:d5:f4:50:a3:aa:e2:18:4e:fa:6c:68:18: df:8e:a8:26:9a:83:07:cb:b8:51:98:75:23:d4:8b:61:36:d9: 74:a5:12:ab:87:e3:c1:b2:26:23:e7:78:66:77:df:d0:e0:82: 5e:f7:9f:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuXDNUaeztzSO/goQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU2NTNmMzctNGIyMi00MGEzLWE4YmQtZTcwZjIwOGMw ZWZiMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk Y2ZiYTg1OWQtNDAwOS00MjZiLWIyOGEtMmNjMWJlODc0ZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVX/iIfwq3y2mZHoYSFC/hUerVba8UkiM0IV vBKjzn6XagxPYLfk/faK5TzJCXqxfu5i/bo2lPjfdXC6Rzx0h0ZhMRmkAz0VXXyX j4fGCO0RMWmwh5zLUMseyJS3Oif9KNiYYwUBTGdy0RgHzvwvjPyQ4M2xqJixsSXb gA5pOhSjMh1VCpw0n9fznridfNWI7gsNwEjm9kDWqSprXha4AvBQ7nexbjhEjc1E AM8fioKqsdeXMChH+2QvMMT7Huzno/xXT+ESc3DOSyBlsYRQN30VwmMCrjAdWunz YQiGvpd9ey7AkFvTLoohYe+ahXrNwtApoU5ntq9XB2191SGHqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKnHwuBdHUvogIg0u9b6K6ilVFpvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1 M2YzNy00YjIyLTQwYTMtYThiZC1lNzBmMjA4YzBlZmIvYmMzZjUwMTMtNjk4Yy0z NmQ1LTgzZWEtNGY1NjRkYWY4OGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGU2NTNmMzctNGIyMi00MGEzLWE4 YmQtZTcwZjIwOGMwZWZiLzRlNjUzZjM3LTRiMjItNDBhMy1hOGJkLWU3MGYyMDhj MGVmYi5jcmwwHwYDVR0jBBgwFoAUIiOW/w0X1WDrC+ORelaadJKAwRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1M2YzNy00YjIyLTQwYTMtYThiZC1lNzBm MjA4YzBlZmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT7gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAZKD2K51tDENRBWr+YeQ0et8hVHbSKkeBQupgokHYqc7h3uvMKCuTR DRoP+rhRNI19oktKxQe8lsUf6+nUBnY/RE0O4edXMxKcxVgBBlWhPM26Ii19NN1H 7KMd7B2J6Lo73fVXJMOuR9c62myxLV4iK0jOiP8EJQa72qKq9II6LB67dx7XeHHg 1AWPWbCAFFx24VLblx3siF2VnMfJ7xVEvneW6jmNJMYdWKOVaWQJoXeJ6mIeWa+U XtKfH50ZVU62a7HvV/Vg+w3DwdLV9FCjquIYTvpsaBjfjqgmmoMHy7hRmHUj1Ith Ntl0pRKrh+PBsiYj53hmd9/Q4IJe95/J -----END CERTIFICATE-----Generated at Wed Nov 5 04:30:50 2025 by rpki-client